The unrar.dll component in IZArc v4.6 contains a path traversal vulnerability (CVE-2025-60835) that allows attackers to manipulate file paths during archive extraction. This flaw could be exploited to write files outside the intended extraction directory, potentially leading to unauthorized file modification or code execution depending on context. No CVSS score or detailed impact metrics are available, and no patch or remediation details have been disclosed.

Successful exploitation of this path traversal vulnerability could allow an attacker to write or overwrite files outside the intended extraction directory. This may lead to unauthorized file modification or code execution depending on the environment and privileges of the IZArc process. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when extracting archives from untrusted sources using IZArc v4.6.